On Sat, 20 Jun 2009 17:07:06 +0200, Brad Kemper <brad.kemper@gmail.com>
wrote:
> I didn't mean it should be restricted by default. Just that CORS could
> restrict it like anything else if you told it to. And that the font
> could instruct the CORS mechanism.
That's not how CORS works. CORS is not about restricting at all. It is
about lifting cross-origin restrictions if any are present. If there are
no restrictions to start with (which I think makes sense for consistency
as I pointed out though it seems not everyone agrees) CORS cannot impose
any.
--
Anne van Kesteren
http://annevankesteren.nl/